declare permission about KernelMarathon